Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: QdmrBTyO2g7Q4ogQMz57yf2lrzFpTGxMD+r/JGipKII=
Subject key identifier: 4A:60:6E:EE:1F:34:8E:FF:40:95:43:BD:8D:F0:52:05:7A:D4:27:2D
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019D9B1953A5052FEAC246926B184B3B2F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0D3D
Signing time: Fri 17 Apr 2026 11:00:21 +0000
Manifest this update: Fri 17 Apr 2026 11:00:21 +0000
Manifest next update: Sat 18 Apr 2026 11:00:21 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: +so4paDanDTkIz3oGQdBsC/7udqLluDZArsRdI/Sec8=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:53:a5:05:2f:ea:c2:46:92:6b:18:4b:3b:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Apr 17 11:00:21 2026 GMT
Not After : Apr 18 11:00:21 2026 GMT
Subject: CN=4a606eee1f348eff409543bd8df052057ad4272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dc:89:48:e8:b6:40:be:dc:85:b1:21:43:e8:
0c:20:be:c3:f0:38:a1:9c:d2:40:db:26:1c:24:e1:
d2:17:5b:b8:54:21:84:b5:ac:32:e4:00:d0:aa:d6:
a0:25:ae:30:67:b6:6f:e5:eb:16:b0:8b:cc:26:f6:
77:7c:78:ce:f8:34:ba:5e:1e:c3:d0:a4:dc:9b:78:
86:48:1b:89:03:6d:8f:59:03:37:21:0f:bb:20:6d:
3e:43:66:8c:36:2e:c9:77:cf:a1:b6:8f:9d:3e:80:
ef:03:7d:4f:f1:e0:e0:97:f1:ad:39:7e:78:73:1b:
e3:fe:1e:54:d1:c7:55:b3:85:5c:cc:7f:df:73:d7:
03:21:64:69:78:4c:5a:f2:1e:a5:35:5c:f7:4c:3a:
f9:39:7b:78:69:80:62:1a:75:97:04:35:cb:9b:49:
6f:3a:55:92:66:51:27:7f:13:7e:66:9e:cd:77:15:
a6:a2:5b:7d:3f:91:ba:c4:62:75:1a:ec:6d:cd:dd:
df:7b:8e:1b:57:12:87:c2:70:70:45:e0:49:f7:29:
3b:08:a2:3b:ea:2a:45:80:b2:a8:53:25:56:e2:c2:
a8:f4:02:c5:d4:e6:24:c6:76:ed:22:5c:d0:f0:9f:
82:2a:23:03:97:94:da:53:39:f1:99:56:1f:83:59:
11:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:6E:EE:1F:34:8E:FF:40:95:43:BD:8D:F0:52:05:7A:D4:27:2D
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ea:09:79:0b:6e:3a:76:1e:3e:27:4a:26:48:92:13:ff:a5:
b6:b8:69:54:bb:86:28:1f:1e:5c:b7:9e:1d:59:fb:64:5e:19:
2e:ad:82:31:12:01:fc:a1:aa:dd:dc:67:4e:f8:11:3e:3d:e4:
28:87:45:c1:0a:0f:77:7c:e2:fe:4a:af:77:66:b5:59:43:1d:
6b:4b:5d:6e:ed:51:3e:09:7a:42:d5:b7:ed:b5:1d:35:17:a9:
02:88:de:26:8d:ae:ec:8d:e1:c2:a0:e5:57:c5:b8:17:c2:f4:
42:d4:41:3b:fe:45:39:8b:e3:48:38:ad:fe:7a:61:29:0c:93:
12:fd:99:9c:bb:44:35:c8:16:86:6f:07:dc:5a:6b:2b:57:88:
c0:c5:0d:68:34:5f:fa:86:8f:b1:d8:53:65:dc:c0:77:a1:29:
e7:7a:a0:9a:94:75:c6:61:80:eb:a1:76:a8:30:93:bb:ad:bb:
59:ad:fd:70:af:58:a0:d7:ab:16:04:36:81:59:25:c1:f0:6a:
c1:75:c6:b9:2e:09:41:8f:33:a7:80:38:62:99:50:fb:95:6a:
99:5e:a4:2f:4e:c0:cc:72:9d:55:c6:6f:61:11:80:46:46:35:
df:d1:b1:62:bb:62:0e:9d:0f:46:9e:69:26:fc:ac:eb:91:38:
08:3a:fe:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGVOlBS/qwkaSaxhLOy8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk
ZDliMjgwHhcNMjYwNDE3MTEwMDIxWhcNMjYwNDE4MTEwMDIxWjAzMTEwLwYDVQQD
Eyg0YTYwNmVlZTFmMzQ4ZWZmNDA5NTQzYmQ4ZGYwNTIwNTdhZDQyNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9tyJSOi2QL7chbEhQ+gMIL7D8Dih
nNJA2yYcJOHSF1u4VCGEtawy5ADQqtagJa4wZ7Zv5esWsIvMJvZ3fHjO+DS6Xh7D
0KTcm3iGSBuJA22PWQM3IQ+7IG0+Q2aMNi7Jd8+hto+dPoDvA31P8eDgl/GtOX54
cxvj/h5U0cdVs4VczH/fc9cDIWRpeExa8h6lNVz3TDr5OXt4aYBiGnWXBDXLm0lv
OlWSZlEnfxN+Zp7NdxWmolt9P5G6xGJ1Guxtzd3fe44bVxKHwnBwReBJ9yk7CKI7
6ipFgLKoUyVW4sKo9ALF1OYkxnbtIlzQ8J+CKiMDl5TaUznxmVYfg1kR/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpgbu4fNI7/QJVDvY3wUgV61CctMB8GA1UdIwQY
MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt
OGQ0OTg4MjdmNDVjLzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj
LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOoJeQtu
OnYePidKJkiSE/+ltrhpVLuGKB8eXLeeHVn7ZF4ZLq2CMRIB/KGq3dxnTvgRPj3k
KIdFwQoPd3zi/kqvd2a1WUMda0tdbu1RPgl6QtW37bUdNRepAojeJo2u7I3hwqDl
V8W4F8L0QtRBO/5FOYvjSDit/nphKQyTEv2ZnLtENcgWhm8H3FprK1eIwMUNaDRf
+oaPsdhTZdzAd6Ep53qgmpR1xmGA66F2qDCTu627Wa39cK9YoNerFgQ2gVklwfBq
wXXGuS4JQY8zp4A4YplQ+5VqmV6kL07AzHKdVcZvYRGARkY139GxYrtiDp0PRp5p
Jvys65E4CDr+aw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:13 2026 by rpki-client